Commit Graph

348 Commits (5bab66f331f7b75f1eee267abd0edbca2e4397ce)

Author SHA1 Message Date
Steven Barth 5bab66f331 netifd: improve reloading behaviour
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36903 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-10 10:42:15 +00:00
Jo-Philipp Wich 4314ac851c iwinfo: add phyname attribute, this is useful to group networks by radio phy
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36889 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-09 14:39:14 +00:00
Jo-Philipp Wich 113981176c libiwinfo: ignore log messages from wpa_supplicant while scanning
wpa_supplicant may send log and event messages intermixed with the
expected scan results.  This makes "iwinfo wlan0 scan" and LuCI
"site survey" display nothing when many AP's are around.

Eliminate the CTRL-EVENT-BSS-ADDED events, interspersed log messages,
lines with unexpected format.  Increase timeout to handle the max
number of channels (2.4, 3.6, 4.9, 5 GHz).  Insure receive buffer is
null-terminated.

Signed-off-by: Jean-Pierre Tosoni <jp.tosoni@acksys.fr>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36888 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-09 14:39:09 +00:00
Steven Barth f70a350203 netifd: Improve IPv6 source-routing policies
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36884 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-08 13:26:33 +00:00
Jonas Gorski 3d9c1a0ebc netifd: bring wifi down before shutting down
works around wifiX references not being freed on network restart.

Signed-off-by: Jonas Gorski <jogo@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36883 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-08 11:44:12 +00:00
Jo-Philipp Wich f77f1322b8 firewall: udpate to git head (#13652, #13654, #13658)
- optimizes chain usage for ingress rules
  - adds limit match support for redirect rules
  - fixes automatic redirect dest detection on little endian systems
  - leaves base chains in place on reload to allow user rules to target e.g. "reject"

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36871 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-06 14:12:02 +00:00
Jo-Philipp Wich 36e8f9b769 firewall: copy libext*.a from staging dir and drop kernel.mk includes, solves problem with colliding CONFIG_IPV6 symbols
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36868 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-06 14:02:29 +00:00
Jo-Philipp Wich db43350712 iptables: install libext*.a into staging dir
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36867 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-06 14:02:24 +00:00
Jo-Philipp Wich ab659cd65b firewall: update to git head (#13652)
- simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst'
  - uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36854 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-05 11:40:40 +00:00
Jo-Philipp Wich 3e804240df firewall3: fix accidentally changed install directive
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36840 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-04 12:30:50 +00:00
Jo-Philipp Wich ea4472d138 firewall: fix git source url
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36839 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-04 12:23:47 +00:00
Jo-Philipp Wich 0f0fb56719 firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36838 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-04 12:21:52 +00:00
Jo-Philipp Wich 484c42a934 Drop legacy firewall package
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36837 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-04 12:21:44 +00:00
Jo-Philipp Wich 2c61fc7f42 firewall3: update to git head (#13641)
* Fixes wrong chain used for zone forward policy

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36830 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-04 10:26:49 +00:00
Jo-Philipp Wich d3cb5e8ecb firewall3: update to git head
- Fixes problems with reusing matches or targets from loadable extensions

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36826 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-03 16:38:29 +00:00
Felix Fietkau 93ac2d0351 uhttpd: update to latest version, fixes CGI related crashes
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36817 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-01 21:43:06 +00:00
Steven Barth c73c43a3a0 6relayd: Work around Windows DHCPv6 quirks
Announcing deprecated addresses breaks Windows clients

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36815 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-06-01 17:51:02 +00:00
Steven Barth 3a67765ef7 odhcp6c: work around spurious false-positive address DECLINEs
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36809 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-31 13:49:17 +00:00
Jo-Philipp Wich 13abaf7561 firewall3: use list notation for default zone network config to avoid "uci add_list" coercing the value wrongly
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36806 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-31 13:23:23 +00:00
Steven Barth 4a532d16c3 odhcp6c: fix handling of multiple RAs in a row
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36804 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-31 10:02:39 +00:00
Steven Barth e547011ac2 6relayd: Better compatibility with misbheaving DHCPv6 clients
* Make the "best" address / prefix the first one being announced
* Only add the "best" address to the hosts-file

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36772 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-30 15:42:30 +00:00
Steven Barth 2837eb86ef netifd: updated IPv6 prefix delegation
* Added support for prefix classes
* Various bugfixes

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36771 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-30 15:42:25 +00:00
Felix Fietkau 1d886ef03c uhttpd: update again to fix a ubus plugin crash bug
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36770 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-30 13:16:38 +00:00
Felix Fietkau 25681e5dbd uhttpd: update to latest version, fixes script timeout for ubus requests
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36767 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-30 10:44:20 +00:00
Steven Barth 5223919c3f 6relayd: more verbosity in leases and logging
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36764 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-30 07:56:55 +00:00
Steven Barth 95dbacb74f iptables: bump to 1.4.19.1
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36760 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-29 14:58:04 +00:00
Steven Barth c802b55757 netifd: fix IPv6-addresses disappearing due to lifetime-overflows
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36748 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-28 18:32:01 +00:00
Steven Barth 929c94d94e odhcp6c: fix or debug disappearing IPv6 addresses
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36745 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-28 16:28:14 +00:00
Felix Fietkau fbe37f1e87 mac80211: add support for "active" monitor interfaces which allow userspace tools to connect to APs via injection
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36743 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-28 11:10:41 +00:00
Steven Barth cf58fd647b 6relayd: RFC 6204 and naming improvements
* Announce delegated prefixes using route info according to RFC 6204 L-3
* Enable hybrid stateless + stateful DHCPv6-mode as default

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36738 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-27 20:38:13 +00:00
Jo-Philipp Wich e461a87b6f firewall3: update to git head
- allows building without IPv6 support
	- uses more robust rules to cope with missing libext.a
	- uses better linking strategy to avoid symbol clashes with older iptables
	- introduces source compatiblity layer for different libxtables versions

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36736 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-27 15:13:19 +00:00
Jo-Philipp Wich bebdc6222a firewall3: update to git head
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24"
  - automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust
  - properly support output rules with dest '*' to hook directly into delegate_output
  - fixes crash when processing rules with unresolved targets

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36721 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-26 15:48:04 +00:00
Steven Barth 2427e3c873 6relayd: Fix DHCPv6-server picking up addresses from master interface
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36718 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-26 10:06:02 +00:00
Jo-Philipp Wich 7a2cfe6c7b firewall3: update to git head
- fixes linking issues with some toolchains

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36703 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-24 12:49:06 +00:00
Steven Barth 7c4f549443 6relayd: fix a lease-timing issue with stateful DHCPv6
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36702 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-24 12:31:30 +00:00
Jo-Philipp Wich ab98ef05fc firewall3: update to git head
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
  - Do not leak memory when processing rules with unknown targets or matches

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36698 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-23 13:07:44 +00:00
Felix Fietkau 4ffd43dbc7 uhttpd: update to latest version, fixes #13564, #13560, improves error handling as pointed out in #13537
Signed-off-by: Felix Fietkau <nbd@openwrt.org>

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36696 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-23 10:50:42 +00:00
Steven Barth cee5ff18de firewall3: Remove abandonend include
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36692 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-23 06:38:25 +00:00
Jo-Philipp Wich d164d12b83 firewall3: update to git head
- fix build on Linux < 3.7
  - limit zone names to 14 bytes

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36691 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-22 14:15:53 +00:00
Steven Barth 3ba70f3735 6relayd: Let OpenWrt override default CFLAGS
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36690 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-22 11:58:54 +00:00
Jo-Philipp Wich 2d37cb839e firewall3: update to git head
- fixes reload when firewall is not running already
  - fixes crash when ipsets are supported but undeclared
  - fixes handling of per zone user chains on reload

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36689 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-22 11:37:41 +00:00
Steven Barth b9453b277b 6relayd: Fix a segfault when multiple downstream interfaces are present
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36687 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 18:05:37 +00:00
Jo-Philipp Wich d3c5b49487 firewall3: update to git head
- fixes segfault in flush command if ipset support is not available
  - fixes internal rule generation if custom chains are enabled

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36686 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 14:49:37 +00:00
Jo-Philipp Wich dc6ea761b5 ipset: remove dependency on iptables-mod-ipset - technically it does not depend on it and the iptables matches are now part of the base
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36685 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 13:00:28 +00:00
Jo-Philipp Wich 557bb37cc1 firewall3: move libext*.a copying to compile phase
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36684 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 12:58:36 +00:00
Jo-Philipp Wich 2952cc9bc7 netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36683 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 12:58:15 +00:00
Jo-Philipp Wich 3538668acf firewall3: update to git head
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
 * make ipset integration more reliable

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36681 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 10:15:14 +00:00
Jo-Philipp Wich 7962222d78 iptables: use -ffunction-sections, -fdata-sections and --gc-sections
git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36680 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 10:15:10 +00:00
Steven Barth 8e44875fa6 odhcp6c: Various fixes
* Honour T1 and T2 values from servers better
* Correctly send Reconfigure-Accept option in requests

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36678 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 09:13:48 +00:00
Steven Barth 4b922c28c7 6relayd: Various DHCPv6-fixes
* Be more standards-compliant in stateful mode
* Handle hostnames from Windows-clients correctly
* Handle messages from DHCPv6-relays better

git-svn-id: svn://svn.openwrt.org/openwrt/trunk@36677 3c298f89-4303-0410-b956-a3cf2f4a3e73
2013-05-21 09:13:40 +00:00